mirror of
https://github.com/xcat2/confluent.git
synced 2024-11-22 17:43:14 +00:00
Add HTTP/1.0 cache suppression
There is not a single client that will ever talk to this service that would not support HTTP/1.1. However, do this to satisfy a scanner.
This commit is contained in:
parent
d2156f3d67
commit
c016c55340
@ -387,6 +387,7 @@ def resourcehandler_backend(env, start_response):
|
||||
"""
|
||||
mimetype, extension = _pick_mimetype(env)
|
||||
headers = [('Content-Type', mimetype), ('Cache-Control', 'no-store'),
|
||||
('Pragma', 'no-cache'),
|
||||
('X-Content-Type-Options', 'nosniff'),
|
||||
('Content-Security-Policy', "default-src 'self'"),
|
||||
('X-XSS-Protection', '1'), ('X-Frame-Options', 'deny'),
|
||||
|
Loading…
Reference in New Issue
Block a user